Problem with certain DH_DSS ciphers

classic Classic list List threaded Threaded
3 messages Options
Reply | Threaded
Open this post in threaded view
|

Problem with certain DH_DSS ciphers

Nadav Golombick
Hi,

When running the openssl with DSA certificates and DH parameter files,
I can't select the ciphers TLS_DH_DSS_WITH_AES_128_CBC_SHA and
TLS_DH_DSS_WITH_AES_256_CBC_SHA. All other options of DH and DSS work,
for example the DHE_DSS ciphers and DH_anon work fine.

Any ideas?


--
Nadav Golombick
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    [hidden email]
Automated List Manager                           [hidden email]
Reply | Threaded
Open this post in threaded view
|

Re: Problem with certain DH_DSS ciphers

Dr. Stephen Henson
On Tue, Nov 15, 2005, Nadav Golombick wrote:

> Hi,
>
> When running the openssl with DSA certificates and DH parameter files,
> I can't select the ciphers TLS_DH_DSS_WITH_AES_128_CBC_SHA and
> TLS_DH_DSS_WITH_AES_256_CBC_SHA. All other options of DH and DSS work,
> for example the DHE_DSS ciphers and DH_anon work fine.
>
> Any ideas?
>

Those require the use of DH certificates which OpenSSL doesn't support.

Steve.
--
Dr Stephen N. Henson. Email, S/MIME and PGP keys: see homepage
OpenSSL project core developer and freelance consultant.
Funding needed! Details on homepage.
Homepage: http://www.drh-consultancy.demon.co.uk
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    [hidden email]
Automated List Manager                           [hidden email]
Reply | Threaded
Open this post in threaded view
|

Re: Problem with certain DH_DSS ciphers

Nadav Golombick
Thanks

On 11/15/05, Dr. Stephen Henson <[hidden email]> wrote:

> On Tue, Nov 15, 2005, Nadav Golombick wrote:
>
> > Hi,
> >
> > When running the openssl with DSA certificates and DH parameter files,
> > I can't select the ciphers TLS_DH_DSS_WITH_AES_128_CBC_SHA and
> > TLS_DH_DSS_WITH_AES_256_CBC_SHA. All other options of DH and DSS work,
> > for example the DHE_DSS ciphers and DH_anon work fine.
> >
> > Any ideas?
> >
>
> Those require the use of DH certificates which OpenSSL doesn't support.
>
> Steve.
> --
> Dr Stephen N. Henson. Email, S/MIME and PGP keys: see homepage
> OpenSSL project core developer and freelance consultant.
> Funding needed! Details on homepage.
> Homepage: http://www.drh-consultancy.demon.co.uk
> ______________________________________________________________________
> OpenSSL Project                                 http://www.openssl.org
> User Support Mailing List                    [hidden email]
> Automated List Manager                           [hidden email]
>


--
Nadav Golombick
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    [hidden email]
Automated List Manager                           [hidden email]